Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IpadAU4lg0Q2SHaNYF-MZ5x7v8.roa
File: 6IpadAU4lg0Q2SHaNYF-MZ5x7v8.roa (raw, json)
Hash identifier: M0rIlWo1rxMH/K7xyshWV226n4MRKw5bhCUCrMbciPI=
Subject key identifier: E8:8A:5A:74:05:38:96:0D:10:D9:21:DA:35:81:7E:31:9E:71:EE:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018692C369E384C0275008047C85AF199E48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IpadAU4lg0Q2SHaNYF-MZ5x7v8.roa
Signing time: Mon 27 Feb 2023 12:05:25 +0000
ROA not before: Mon 27 Feb 2023 12:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:92c2:9407/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:c3:69:e3:84:c0:27:50:08:04:7c:85:af:19:9e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 12:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88a5a740538960d10d921da35817e319e71eeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:8b:a8:42:6f:c6:19:b1:00:23:29:76:ea:
9d:45:64:98:88:99:45:83:cc:38:17:10:39:6c:db:
29:8b:e9:79:b5:b4:06:2c:2d:fa:f0:78:e7:c2:2f:
38:ee:56:22:ab:20:d7:e1:c9:ec:32:f6:86:f7:a0:
3e:74:99:28:2a:8c:7a:bf:ca:b4:c0:2a:38:72:05:
95:1b:e9:b5:77:9b:8d:7d:ba:e5:82:71:e8:e8:38:
97:44:9b:ab:e5:53:35:bd:10:48:f3:2a:85:7e:14:
2f:db:e2:3b:c7:4f:02:df:dc:7d:12:10:0a:77:b1:
26:0d:7e:f6:f1:c3:a1:9e:a9:29:f6:e6:59:bd:fb:
6d:b0:25:43:9c:53:cf:0a:b6:3d:1c:51:0f:4a:07:
4a:49:eb:00:18:1b:c9:f9:ad:9d:c8:0b:23:b6:f8:
a5:17:55:b7:61:23:f3:a6:12:0d:ff:9c:55:1a:df:
f9:69:38:93:52:19:00:0e:55:6c:d3:c7:32:45:71:
c5:5b:06:26:3c:d1:07:36:a0:74:6a:c8:bd:f1:57:
40:49:43:0c:6f:ce:07:2e:9e:85:3b:e6:c3:ac:ea:
71:45:d6:2c:e9:51:f3:53:28:f9:a9:dd:d3:9c:35:
e4:f7:3c:8d:e8:fa:cc:f8:70:be:3c:15:d9:44:71:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8A:5A:74:05:38:96:0D:10:D9:21:DA:35:81:7E:31:9E:71:EE:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IpadAU4lg0Q2SHaNYF-MZ5x7v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:e3:b1:cb:65:ba:69:55:de:f0:55:e1:d7:2b:26:89:07:26:
80:b5:b9:1e:6b:a3:c5:8a:f8:8a:2c:64:15:20:90:54:30:d5:
b1:95:48:2b:fa:78:e3:69:e5:d8:1d:4b:45:a6:9c:6c:30:eb:
c4:d0:0c:5d:ce:84:38:45:c9:7d:0e:b2:b0:bb:de:5c:3d:b6:
be:24:8b:c4:a2:8c:e5:01:ef:8e:cb:a9:54:2d:ba:5d:91:c3:
16:1d:32:71:97:e3:04:75:68:39:69:25:fc:c4:44:2d:b0:bc:
29:e8:a8:93:ac:10:1d:b0:1f:38:4e:51:cc:91:ab:5c:0c:6e:
aa:84:8f:8f:07:6f:db:4e:64:fd:78:e7:f0:24:b3:82:01:19:
8f:b3:f8:20:ff:cd:66:92:92:96:dd:11:9c:22:98:e9:4b:57:
8f:b6:40:17:1e:67:a5:dd:b3:02:b5:ff:27:7c:26:7b:43:f6:
a4:75:ba:30:18:93:90:f1:46:6f:f1:f7:99:ec:8c:35:be:1d:
84:78:62:1a:1c:c6:8c:e6:5f:ef:6f:b8:5c:96:78:28:ca:75:
ef:6d:da:0a:43:dd:2e:0e:ec:1e:c5:6c:50:74:8b:dd:46:97:
cb:d9:cb:73:ed:0a:f7:30:11:fa:7f:2c:13:73:e5:39:ea:0e:
4c:fd:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:19:57 2025 by rpki-client